CVE-2005-3629: Red Hat Enterprise Linux

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allows local users with sudo permissions for /sbin/service to gain root privileges via unknown vectors.

Affected products

• Red Hat Enterprise Linux: version 3.0 only; version 4.0 only

Published 2005-12-31. Last modified 2026-06-16.